Crate osproxy_server 

Library half of the osproxy binary.

Holds the reference tenancy implementation and the ingress handler that wires the engine pipeline to the transport. It lives in a library (with main.rs a thin entry point) so the wiring is unit- and integration-testable without spawning a process.

Re-exports

pub use osproxy_capture as capture;

Modules

auth

The reference authenticator the binary uses.

cursor

Concrete HMAC signer for the stateless scroll/PIT affinity envelope (docs/03 §6). The cluster a cursor is pinned to travels with the cursor in a signed token, so any fleet instance can recover it with no shared store; the signature stops a client redirecting a cursor to another cluster.

directive

Concrete HMAC verifier for the signed X-Debug-Directive header, the surgical, single-request diagnostics channel (docs/05 §3). An operator mints a token off-band with the shared key; a client cannot forge one, so it cannot self-enable verbose diagnostics (NFR-S3). The token rides the request and is verified by whichever instance handles it.

forward_headers

The client-to-upstream header forwarding policy.

handler

The ingress handler: authenticates the caller, builds a request context, and drives the engine pipeline, mapping the outcome to an HTTP response.

log

Structured per-request logging.

tenancy

The reference tenancy implementation the binary serves.